All frameworks
nist-80053-rev5version Rev. 5

NIST SP 800-53 Rev. 5

Official source

1,196 controls.

ReferenceFamilyTitle
CP-2(8)Contingency PlanningIdentify Critical Assets
CP-3Contingency PlanningContingency Training
CP-3(1)Contingency PlanningSimulated Events
CP-3(2)Contingency PlanningMechanisms Used in Training Environments
CP-4Contingency PlanningContingency Plan Testing
CP-4(1)Contingency PlanningCoordinate with Related Plans
CP-4(2)Contingency PlanningAlternate Processing Site
CP-4(3)Contingency PlanningAutomated Testing
CP-4(4)Contingency PlanningFull Recovery and Reconstitution
CP-4(5)Contingency PlanningSelf-challenge
CP-5Contingency PlanningContingency Plan Update
CP-6Contingency PlanningAlternate Storage Site
CP-6(1)Contingency PlanningSeparation from Primary Site
CP-6(2)Contingency PlanningRecovery Time and Recovery Point Objectives
CP-6(3)Contingency PlanningAccessibility
CP-7Contingency PlanningAlternate Processing Site
CP-7(1)Contingency PlanningSeparation from Primary Site
CP-7(2)Contingency PlanningAccessibility
CP-7(3)Contingency PlanningPriority of Service
CP-7(4)Contingency PlanningPreparation for Use
CP-7(5)Contingency PlanningEquivalent Information Security Safeguards
CP-7(6)Contingency PlanningInability to Return to Primary Site
CP-8Contingency PlanningTelecommunications Services
CP-8(1)Contingency PlanningPriority of Service Provisions
CP-8(2)Contingency PlanningSingle Points of Failure
CP-8(3)Contingency PlanningSeparation of Primary and Alternate Providers
CP-8(4)Contingency PlanningProvider Contingency Plan
CP-8(5)Contingency PlanningAlternate Telecommunication Service Testing
CP-9Contingency PlanningSystem Backup
CP-9(1)Contingency PlanningTesting for Reliability and Integrity
CP-9(2)Contingency PlanningTest Restoration Using Sampling
CP-9(3)Contingency PlanningSeparate Storage for Critical Information
CP-9(4)Contingency PlanningProtection from Unauthorized Modification
CP-9(5)Contingency PlanningTransfer to Alternate Storage Site
CP-9(6)Contingency PlanningRedundant Secondary System
CP-9(7)Contingency PlanningDual Authorization for Deletion or Destruction
CP-9(8)Contingency PlanningCryptographic Protection
IA-1Identification and AuthenticationPolicy and Procedures
IA-10Identification and AuthenticationAdaptive Authentication
IA-11Identification and AuthenticationRe-authentication
IA-12Identification and AuthenticationIdentity Proofing
IA-12(1)Identification and AuthenticationSupervisor Authorization
IA-12(2)Identification and AuthenticationIdentity Evidence
IA-12(3)Identification and AuthenticationIdentity Evidence Validation and Verification
IA-12(4)Identification and AuthenticationIn-person Validation and Verification
IA-12(5)Identification and AuthenticationAddress Confirmation
IA-12(6)Identification and AuthenticationAccept Externally-proofed Identities
IA-13Identification and AuthenticationIdentity Providers and Authorization Servers
IA-13(1)Identification and AuthenticationProtection of Cryptographic Keys
IA-13(2)Identification and AuthenticationVerification of Identity Assertions and Access Tokens

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.